This is a courtesy translation provided for convenience. The Spanish version of this document is the legally binding one and prevails in case of any discrepancy. View the Spanish version

Privacy Policy

Data controller

The controller of your personal data is Mauricio Zúñiga Cuéllar, a natural person, NIT 94.060.281-1, domiciled at Calle 3D # 66 - 47, Cali, Colombia. Contact: kaiinteract@mauroz.xyz.

What data we process

From your account: name, email, password (stored only as a hash), language, plan, and the demographic details you choose to give us (gender, year of birth, country, time zone — all optional).

From your sessions: the titles, questions, and options you create, and your participants' responses.

From participants: a technical identifier per session and, if the facilitator sets it up and the participant enters one, a name. Sessions can be fully anonymous: in that case we ask the participant for no personal data at all.

From the operation of the service: technical security logs (with no content from your sessions) and the record of your payments.

What we use it for

To provide the service (showing results, computing statistics, generating reports), to charge you for what you purchase, to send you transactional emails (verification, password recovery, receipts), and to handle your support requests. We do not sell your data, nor do we use it for third-party advertising.

Data processors

To operate the service we use these providers, which process data on our behalf:

Anthropic (United States): processes the text of participants' responses when you ask to group them with AI, and the session's aggregated data when you generate the report or use the copilot. We do not use your data to train models.

Resend (United States): receives your name and your email address in order to send you the service's transactional emails.

dLocal Go, a product of the company dLocal: processes payments; it receives your email address and the amount of the purchase. We never see or store your card data.

Your rights (Article 8 of Colombian Law 1581 of 2012)

As the data subject you have the right to: (a) know, update, and rectify your data; (b) request proof of the authorization granted for its processing; (c) be informed of the use that has been made of your data; (d) file complaints with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority, for breaches of the data protection regime — write to us first: almost everything is resolved right there, and the law also asks that you complete that step with us before going to the SIC (Article 16); (e) revoke your authorization and request the deletion of your data where there is no legal or contractual duty to keep it; and (f) access your data free of charge.

To exercise any of these rights, write to kaiinteract@mauroz.xyz. Article 12 of the same law requires us to inform you of all of them, and that is exactly what this section does.

Retention and security

We keep your data for as long as your account exists, plus whatever Colombian accounting and tax law requires for payments. On the Free plan, session history is kept for 90 days. We use encryption in transit (TLS), hashed passwords, and access controls; no system is infallible, but if we detect an incident that affects you, we will notify you.